Crontab not working when passwordless root is disabled --- any ideas?

User Support
1

I have enabled the dom0 user prompt for root according to this guide: Passwordless root access in qubes | Qubes OS

The consequence of this is that the cronjob no longer works. It gives a pam issue even for cronjobs that are just user crons without any root because the cron daemon itself cannot start or something weird. Does anyone have any idea on how to get cron working while having the dom prompt?

2

The error in systemctl status is the following. Any ideas?

Jan 01 19:20:01 testing crond[72614]: (user) PAM ERROR (Failure setting user credentials)
Jan 01 19:20:01 testing crond[72614]: (user) FAILED to authorize user with PAM (Failure setting user credentials)
Jan 01 19:21:01 testing crond[72654]: PAM unable to dlopen(/usr/lib64/security/pam_sss.so): /usr/lib64/security/pam_sss.so: cannot open shared object file: No such file or directory
Jan 01 19:21:01 testing crond[72654]: PAM adding faulty module: /usr/lib64/security/pam_sss.so
Jan 01 19:21:01 testing crond[72654]: (user) PAM ERROR (Failure setting user credentials)
3

Haven’t tried troubleshooting cron yet. Try replacing cron with systemd-cron?

4

Yeah, systemd-cron works in Qubes 4.1 templates - crontab, /etc/cron.* anacron dirs, etc.